pc-decrapifier-2-3-0.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
8b4f022ecc512d9e3077861b97ee0d35

SHA-1:
6ab3313b58c16c98ad3519381b3d6ecf46c3c44a

SHA-256:
52d22dd4eaf846b5328ae293bb950948b66facf3d2be96a7d11d9f2a11c14841

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:30:03 AM UTC  (today)

File size:
1.6 MB (1,671,635 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:LkIWZabMSG38VVRJ1zyb6Tj+mqghpUIqfhSD:ftvG38VVRJ1rTjW8vghI

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file pc-decrapifier-2-3-0.exe has been seen being distributed by the following 22 URLs.

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_br&type=PROGRAM&Expires=1478785498&Signature=LtRsE762Fpl-tzN5lSNX5K~Qseoc9SXGBlPyd1ytvwfs4R9IyV5jLtNnDkbGXUnmBvGJFVKtXCx1m~X01Ns10Sfhyz7hxh6mTxaVHUTBt9D4MjbIW-eVSDbcMclf3zNmAq2jqDjeHZyLeUBHfCo9CFq3FbXFThEbdvw8IyDZIUs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_en&type=PROGRAM&Expires=1477638938&Signature=SWZJ4btfnGnGSQkTWyisHK6OH0azi9hOWMd~nQnGuQY8NrZJBiAFRg6q5-FQ3alIS5tzHDhOMUwuKTzEzcxGGhVqFfFlS1fljqjVhJwBJm78PcxdaEEil21OKJqGj1oYgQkQXAnuC98eX-uPk87Y50z68cSanT6RhNmauAsC~w4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_br&type=PROGRAM&Expires=1476000754&Signature=Yb7qoHvvkKY3kk6lRWYBSP-ekPMQYtkPjVIlpwgk8daHo~L2EraRDsd7zovopk6V2sICVDNxZ4-rad15aT3ylO647Vo2pqQuffwH3mnshx3butVyWX50Xg5gaLcwEXHptckgDyywWgjYZ9qBNPRIS7YXMwNkU6S5uJhV0DkF1u4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_fr&type=PROGRAM&Expires=1475007877&Signature=AXgrRHy8NSMCO1uXE3eBKZnqCuDCGprj4CPt41qUcBMImqV2-64DTAXOZKdiPiaksWoaGaYmkdyHouT9OfeWRH831JqgiBFVB5F0PVXKUpRLaBKB1mUnl3IQnoyyIY7wWVe1v8lxdJegvLatPbUmt2YHVcyJ7315u78n8bwL0ZM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_fr&type=PROGRAM&Expires=1476063946&Signature=Ir3AcA0xqtuIT-WDxItsc-ujn~0zSdCAZ8UGstXWQIFUfr1bAE9Cf4-d5OVtGm4wNcC~ZDBE3RxO1g4ofUkpudwU0F-G8Xu~B9Zm-BvGIaj-0-xybZEayg0g36fD2ZCF1tCLeClvuPGEOAb9Dh8NkA-vu0YSR6-BFSfgOFv6pLA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_it&type=PROGRAM&Expires=1481671139&Signature=KkEFRSYN1dB3YJA91fI1MxufjiGA4HlRwZ~EC4eE~YNfRcObFJgG9lWZj41NTGJL01--0hOkOTYv1mV4pR14y9lI5utjElKDNss8vw-M5lCgLWa3j33yDNXe09UrsHU-jAtxL9bwjo3QU-MQTKKXLNGIy5GsJbQBtNBB6cwpufM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_fr&type=PROGRAM&Expires=1478609905&Signature=GvSC4djK2tvCaBauHlOjhrE8pzjacsdD9nwBvCBv1S-QLJsCAlWgboNCI7nEuHVB0HGR6d6t-ndZv7CRY73yfxBTGWci~D3IEp5uH6p~Ut4G5uZLaCudg5877tcYJl~3ygB6Lc8uyBQAXq1QFppMUvt5hixCNcJBBCtmT7iGTYk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

http://gsf-cf.softonic.com/6ab/331/.../file?SD_used=0&channel=WEB&fdh=no&id_file=62136&instance=softonic_br&type=PROGRAM&Expires=1474125276&Signature=WFLsKDhKHraDRU1r8-gDTc5ATUEfTPVlhfGdH9tYvNv6mAN7CE4a-uwm5J~x2pfaZgRwbxMkSm0-J0mLVr1UN5vPTWtjvvfPFu-5Gl1x90nymxjmFV39laa91YdBAKu1WhscLHfSKbsO7iqLzBqqy2bHY7KiVAnxATJDxMDuEFo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pc-decrapifier-2-3-0.exe

blob:http://sd-web.softonic.com/226dea44-6962-4b30-9531-092b156c7779

Scan pc-decrapifier-2-3-0.exe - Powered by Reason Core Security